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Amendments to the Claims 



This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims: 

1. (Currently Amended) A method for correlating network information comprising: 
obtaining control information from at least one of a plurality of network resources^, 

wherein the network resources are routers and the control information is routing information that 
is used by the routers to transmit data within a distributed computer network between the routers 
and other systems of the distributed computer network ; 

storing, in a database, status information related to a change of the control information; 

obtaining data transmission information from the at least one of the plurality of network 
resources; Mid 

determining that the control information and the data transmission information are 

related; 

correlating the control information and the data transmission information; 

determining that a change in control information is related to an observation of a change 

in data forwarding: and 

observing the change in data forwarding by observing a change, over time, in the data 

transmission information . 

2. (Canceled) 

3. (Canceled) 

4. (Canceled) 

5. (Canceled) 
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6. (Original) The method according to claim 1, 
causal effect on the data transmission information. 
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wherein the control information has a 



7. (Original) The method according to claim 1, wherein the data transmission information 
includes at least one of the group comprising: 

network characteristics; 
transport characteristics; 
application characteristics; 
reachability information; and 
unavailability information. 

8. (Previously Presented) The method according to claim 1, wherein the control 
information includes at least one record having a timestamp indicating when the change 
occurred. 

9. (Original) The method according to claim 8, wherein the at least one record includes 
information indicating the nature of the change. 

10. (Original) The method according to claim 1, further comprising an act of indicating that 
the change is causally related to a change in data transmission information. 

1 1 . (Original) The method according to claim 3, further comprising an act of indicating that 
the change is causally related to the change in data transmission information. 

12. (Original) The method according to claim 10, wherein the act of indicating further 
comprises an act of indicating, to a user, that the change is related. 



13. (Original) The method according to claim 11, wherein the act of indicating further 
comprises an act of indicating, to a user, that the change is related. 
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14. (Original) The method according to claim 1, further comprising acts of: 
monitoring a data transmission of at least one source address; and 

determining at least one network route associated with the at least one source address, 
wherein the act of determining that the control information and data trzinsmission information are 
related further comprises correlating data transmission relating to the monitored data 
transmission with the at least one network route. 

15. (Original) The method according to claim 1, wherein the resource in a network 
communication device is configured to forward data to one or more entities of a communication 
network. 

16. (Original) The method according to claim 1, wherein the control information includes 
routing information of a network forwarding node. 

17. (Original) The method according to claim 2, wherein the change in data forwarding is 
produced by a change in control information of a network forwarding node. 

18. (Original) The method according to claim 17, wherein the change in control information 
includes a change of forwarding control information stored in a memory of the network 
forwarding node. 

19. (Original) The method according to claim 1, further comprising an act of modeling 
behavior of a network forwarding system that forwards data based on the control information. 

20. (Original) The method according to claim 19, further comprising an act of determining 
that the obtained data transmission information is inconsistent with the modeled behavior of the 

network forwarding system. 

21 . (Original) The method according to claim 20, further comprising an act of correlating the 
change in the control information with a change in the obtained data transmission information. 
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22. (Original) The method according to claim 1, wherein the act of obtaining control 
information includes an act of passively monitoring at least one trzinsmission of the control 
information. 

23. (Original) The method according to claim 22, wherein the control information is 
transmitted over a network. 

24. (Original) The method according to claim 1, wherein the act of obtaining data 
transmission information includes an act of monitoring data stored in a network forw£irding 
system. 

25. (Original) The method according to claim 19, further comprising an act of modeling a 
link state of the network forwarding system. 

26. (Original) The method according to claim 25, further comprising an act of correlating the 
link state with a change in data transmission information. 

27. (Original) The method according to claim 1, wherein the act of obtaining control 
information includes an act of requesting the control information from a network forwarding 
node. 

28. (Currently Amended) A system comprising: 

a collector adapted to receive data transmission information; 

a collector adapted to receive control information used by routers, wherein the control 
information is routing information that is used by the routers to transmit data within a distributed 
computer network between the routers and other systems of the distributed computer network : 

and 

a correlator that correlates the received data transmission information and the received 
control information, wherein the correlator is adapted to store changes in control information 
periodically over a period of time and is adapted to determine that a change in control 
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information is related to an observation of a change in data forwarding within the distributed 



computer network . 



29. (Canceled) 

30. (Previously Presented) The system according to claim 28, wherein the correlator is 
adapted to store a change in control information. 

31 . (Original) The system according to claim 28, wherein the data transmission information 
includes at least one of the group comprising: 

network characteristics; 
transport characteristics; 
application characteristics; 
reachability information; and 
unavailability information. 

32. (Original) The system according to claim 28, wherein the collector adapted to receive the 
transmission information and the collector adapted to receive the control information are 
distributed in a communications network. 

33. (Original) The system according to claim 28, further comprising a database adapted to 
store the received data transmission information and the received control information. 

34. (Original) The system according to claim 28, wherein the collector adapted to receive the 
data transmission information is configured to receive the data transmission information from 
one or more network forwarding nodes. 



